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SPECIFICATION 

Personal identification device 

5 The present invention relates to a persona] identifica- 
tion device which can enable an individual to provide 
proof of identity or enable validation of an indi- 
vidual's right of access to various facilities, which 
may additionally incorporate storage means for a 

10 variety of personal information about the individual. 
A variety of different types of identification devices 
are known, some of these being in the form of sec- 
urity passes, wherein an access code is stored on a 
card, and in the form of a magnetic strip or a combin- 

1 5 ation of magnetized dots or in theform of optical 
character readable print. Such cards may addition- 
ally include oneor more photographs of the holder 
and the holder's name, signature, status etc. Further, 
credit cards, charge cards or cash cards are known 

20 which enable a user to access a bankcomputer in 
orderto withdraw money from their current account 
or to obtain cash advances from a credit account or 
to obtain goods and services from retailers or re- 
staurants orthe like. Such cards are normally issued 

25 by banks and other financial institutions to allow 
their customers access to a range of services prov- 
ided for them. In addition, independent credit card 
companies also exist and a variety of large chain 
stores and mail order stores have their own credit 

30 card schemes, so thatthere is a potential for an indi- 
vidual to have dozens of different cards available to 
him. With many of these cards, particularly those 
issued by banks, a customer can obtain a personal 
identification number (p.i.n. code) for use with a part- 

35 icular banks card for use when obtaining access to 
his own account or accounts at the bank or for mak- 
ing cash withdrawals or other financial transactions. 
In view of the large number of cards which utilise 
such a p.i.n. code, the user may have to remember 

40 several different p.i.n. codesfor different accounts 
which he holds. The p.i.n. code is essential with such 
devices to assure security of access to an individual 
user's account, since the card and correct p.i.n. 
number are required before the card can be utilised 

45 in accessing the information via a cash dispenser or 
service till. 

It is a disadvantage of the present type of devices 
that each company issuing a card utilises their own 
coded information on the card for identifying the ac- 

50 count of theuser, which isthen confirmed bytheuser 
by input of the correct p.i.n. code, so that existing 
cards are not fully interchangeable with cards of an- 
other supplier and because of the large numbers of 
cards which maybe involved, a user may have to 

55 attempt to remember several p.i.n. numbers for the 
various cards held. The result of this problem is often 
that the user of the card, despite warnings from the 
company issuing th card, will often write down the 
p.i.n. number on something carried with the card, so 

60 that in the event the number is forgotten the number 
can be looked up readily. Unfortunately, this does 
cause security problems in that, if the card is stolen, it 
may be that the security numberwill also have been 
stolen, thereby giving the thief immediate access to 

65 the card holder's personal account. 



In orderto overcome such a problem, it would be 
preferable to attempt to provide a single device, 
which is capable of being utilised by all users and 
which contains universally acceptable information 

70 aboutthe userfor enabling correct identification of 
the user and which at most requires the user to re- 
member a single p.i.n. number but may alternatively 
utilise another time of personal information, for ex- 
ample^ uniquefingerprint or voice print of theuser, 

75 in orderto establish identity for access to secure in- 
formation oraccounts, utilising existing terminal 
equipment with suitable minor modifications where 
necessary. 

It is the aim of the present invention to seek to pro- 

80 vide a personal identity device which may suitably be 
used as or incorporated in an item of jewellery, or 
alternatively may be incorporated in a wristwatch, 
pocket-watch or calculator, according to the user's 
preference, and which is capable of enabling es- 

85 tabltshment of the identity of the user. 

According to the present invention there is prov- 
ided an electronic identity device including means 
for enabling output of identity information upon ac- 
tivation thereof. 

90 Preferably, the output of identity information is 
time-dependent and said means comprises a multi- 
numbertime-dependent code generator syn- 
chronised with an identical, remote code generator 
capable of confirming the identity of the device and 
95 the user thereof in a secure system, upon input of a 
personal identity access code or a personal char- 
acteristic of the user. The personal identity access 
code may be a conventional p.i.n. number which 
may be input into an electronic console or may com- 

100 prise a personal characteristic of the user, e.g. a fin- 
gerprint or voice print. 

Further preferably, the device may also include 
stored therein various non-secure items of informa- 
tion such as the specific medical history of the user, 

105 giving detailsof any special medical requirements in 
an emergency, i.e. blood group, allergies etc., which 
may be suitably accessed in an emergency. The de- 
vice may also include other personal information 
such as driving licence number, insurance certificate 

110 number and insurance details of the owner's vehicle 
etc., orthe passport number and an image of theuser 
which may either be displayed on the device itself or 
be transmitted via a suitable I ink to a console for dis- 
play of such information as required, e.g. for a 

115 customs or immigration official. 

The device of the present invention may suitably 
be incorporated in an item of jewellery such as a 
wristwatch, pendant or bracelet orthe like or in a 
pocket electronic calculator ortravel alarm clock and 

1 20 may include its own display or be connectable to or 
capable of communicating with another device such 
as a compatible terminal in a bank or other establish- 
ments the display of information. The device may 
include long-life batteries or may utilise solar cellsor 

125 acombination of these to prolong useful life thereof 
if required, but the device is preferably provided as a 
sealed secure unit having a predetermined life, so 
that secure information may only be input to the de- 
vice initially and may not subsequently be altered or 

130 updated, although separate means may be provided 
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for input and update of non-secure information, as 
referred to above. 

The device of the present invention provides a use- 
ful identity device, which is less likely to be lost or 
5 misplaced than identity cards or bracelets or credit 
cards orthe like and which is capable of storing a 
variety of information, including emergency inform- 
ation about the wearer in a single device, which may 
be used for a variety of pu rposes, including entry ac- 

1 0 cess to a vehicle security system or home security 
system belonging to the user. The device could also 
include or activate a small transmitter for the output 
of a signal for operating equipment remotely from 
the device, e.g. for disarming a security system orop- 

15 ening a security door or the like or for communicat- 
ing directly with a radiotelephone network to enable 
transactions to be performed at a variety of locations, 
for example, by suitable interfacing with a cellular 
telephone device. Similarly, such devices may be 

20 used additionally as a paging device to enablethe 
wearer to be contacted whatever his location may be 
again utilising the cellulartelephone network. 

Depending upon the intended usage of device, 
such maybe provided with, or connectable to, an 

25 appropriate keyboard module to enable such to be 
used as a data storage means or possibly a display 
for another device such as a calculator or even con- 
nectable to a portable computer. 
The device may include a tamper-proof arrange- 

30 ment which would act to prevent access to the secure 
identity information or unauthorised output of in- 
formation, other than emergency information which 
may be required. 
The present invention will now be described 

35 further, by way of example, with reference to the ac- 
companying drawings, in which:- 

Figure 1 illustrates schematically, a module ac- 
cording to the present invention; 
Figure 2 illustrates a possible example of the 

40 module of Figure 1 in use with a verification console; 
Figure 3 illustrates a possible construction of a 
module according to the present invention and utilis- 
ing a sensitive matrix for scanning a fingerprint app- 
lied thereto; 

45 Figure4\s a block diagram of a possible circuitfor 
performing the function of the present invention 
when utilising a fingerprint as identification means; 

F/gt/reSillustratesthe internal program of atime 
dependent code generating device incorporated in a 

50 device of the present invention; and 

Figure 6i!lustratesthe corresponding program 
steps in a remote device capable of being linked with 
a module utilising the program set out in Figure 5. 
Referring firstly to Figure 1,an example of a per- 

55 sonal data module device 1 0 is shown schematically 
illustrating the manner in which the device 1 0 may be 
loaded with information upon commissioning 
thereoffora particular user, including personal ac- 
count information and details for establishing the 

60 identity of the user, including a personal char- 
acteristic or a p.i.n. code. In addition, the user may be 
allowed to input personal data, either by supplying 
such information to the institution issuing the device 
10, or via a console supplied with the device, or on a 

65 keypad incorporated in, or ableto communicate 



with, the device. 

The relevant information stored in the device 1 0 
can be stored in a central computer unit of the institu- 
tion issuing the device so that, at a subsequent date, 
70 when the device is activated and is in communication 
with a peripheral connected to the institution's cen- 
tral computer of the institution, e.g. a bank, the user 
is able to access personal account details etc. and up- 
date and make requests of the central computer. 
75 Alternatively, the device 10 could simply communi- 
cate with a console, which may be manned, such 
console being capable of producing a visual display 
20,as shown in Figure 2, which can display to the 
operator personal information about the holder of 
80 the module in order to establish the identity thereof, 
for example the signature, photograph, or other per- 
sonal information about the user which the operator 
can utilise to verify his identity. 
As can be appreciated from the above, there a re a 
85 variety of applications in which the module can be 
used whetherused by a banktelter, or retailer deal- 
ing directly with the customer, or via an automatictill 
or cash dispenser orthe like. 
As referred to above, the device is preferably incor- 
90 po rated in a watch, since such may already contain 
much of the circuitry necessary for performing th 
functions of the device, namely a microprocessor 
and associated program storage and data storage 
means and a liquid crystal display. Relatively com- 
95 plex watches are available which include storage fa- 
cilities and indeed which areconnectableto compu- 
ter devices to enable uploading and downloading of 
information therefrom and may act as a display de- 
vice fora miniature computer orcalculator. As such 

100 therefore, many of the functions of the watch as en- 
visaged by the present invention can be readily com- 
bined from existing devices, butadditiohally inclu- 
des a secure personal p.i.n. code, known only to the 
user, or personal characteristics of the user, for ex- 

105 ample, the characteristics of the fingerprint or voice 
print of the user which can be used to activate the 
secure operation of the device, when seeking access 
to sensitive installations, not only including personal 
bank information relating to the user, but also for 

110 general security purposes, if desired. Once correctly 
actuated by such secure means, the device can then 
be utilised by such secure means, the device can then 
be utilised to enable access to such secure installa- 
tion or equipment by transmission of a code signal 

115 unique to the device and recognisable by the security 
equipment controlling access to such information or 
installation, such secure code being ableto be trans- 
mitted directly thereto by any of a variety of means, 
including an ultrasonic or infrared signal or a direct 

120 electrical I ink to the equipment or by a short range 
radio transmission. As an alternative to incorporat- 
ing such features in the watch itself, the means for 
inputting the personal identity number orthe voice 
orfingerprint could be contained within the console 

1 25 of the equipment with which the device is com- 
municating such that on actuation of the device by a 
non-secure means, the installation being soughtto 
be accessed identifies the specific watch in question 
and awaits a confirmation by means of the input of a 

130 personal code into the machine itself or by the applic- 
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ationof a recognisable thumb print orfingerprint or 
upon recognition of the required voice matching the 
voice print stored by the computer. As such, there- 
fore the device itself requires very few component 
5 parts, the bulk of the recognition system being con- 
tained within the console, rather than the wrist watch 
thereby enabling simplification of the construction of 
the device. 

Referring now to Figure 3, this illustrates in an ex- 

10 plodedviewa possible construction of a wrist watch 
in which the electronic circuitry is contained on a PCB 
30 containing the necessary electronic circuitry in 
micro-electronic form, including the normal watch or 
clock function devices together with micro- 

1 5 processor and memory storage chips 31 and devices 
32 for enabling communications, either by utilising 
an on-chip transmitter and/or receiver 33 and pos- 
sibly a modem 34, enabling the device to be utilised 
in communication with other devices down a cable 

20 connector, or vai an antenna which is preferably 
formed by the bracelet of the watch. In addition, a 
transparent matrix 36 overlies an LCD display 37 in 
order to detect the conformation of afingerprint ap- 
plied thereto. Suitable buttons 35 may be provided 

25 on the watch case to enable actuation of the device 
and for control of the various clock fu notions in order 
to enable other functions, which may be required of 
the watch, to be performed. 

Referring now to Figure 4, this is a block circuitdia- 

30 gram illustrating the manner in which the com- 
ponents can be connected together to perform the 
function as described above in the embodiment of a 
watch having a pressure sensitive matrix for detect- 
ing a fingerprint applied thereto. In the arrangement 

35 shown in Figure 4, the device is controlled byamic- 
roprocessor40 with associated fixed or read-only 
memory 41 for storing secure details including data 
relating to the configuration of the fingerprint of the 
user for comparison with the configuration ofthefin- 

40 gerprint applied to the matrix upon actuation of the 
device. In addition, a variable or updateable memory 
42 can additionally be provided to store information 
which is likely to be changed from time to time, for 
example any personal information. The micro- 

45 processor 40 also controls the normal clock functions 
of the watch, details of which are not shown, but a re 
standard in the art, as well as controlling enabling of 
the display 43 or any of the various interfaces 44 or 
radio transmitter and receiver 45 according to which 
50 are provided in the device. For example, the display 
43, in addition to being able to display the normal 
time and various clock functions as per a standard 
watch, such can store other i.d. information or per- 
sonal details, according to the purposes to which the 
55 device is to be applied, including any messages 
which may have been received by the device if such 
is used in a radio reception mode, for example for 
radio paging orthe like via the cellulartelephone net- 
work. Alt rnatively, the display 43 of the watch may 
60 only display the clockfunctions, the security aspects 
of the device being achieved by transmission of app- 
ropriate coded information to a console via a short 
range ultrasonic or infrared or radio transmission or 
via a direct local connection by a short lead to a de- 
65 vice with which it is to communicate. The particular 



mannerin which the device would function in prac- 
tice would be determined entirely by the intended 
use and the desired features to be incorporated. For 
the purpose of direct connection orfacilitating radio 

70 transmissions or ultrasonic infrared signals to be 
transmitted, then appropriate interfaces and re- 
ceivers are supplied again controlled by themicro- 
processor40, as required. 
It is considered that in one possible embodiment, 

75 as far as the user is concerned, the device performs 
only normal functions of a watch or other device in 
which the device of the present invention is incor- 
porated, with all the necessary communication with 
security systems being performed in a manner not 

80 apparent to the user, so as to avoid complicating the 
device, the user only being required to make ap- 
propriate input to a console with which the device is 
to communicate, in which case the various more 
complex pieces of apparatus which maybe required 

85 for use with the device can be incorporated in the 
console. For example, upon actuation of the device, a 
sig nal is tra nsm itted to the co nsol e to identify the 
user and then confirmation of the identity of the user 
is input by the user directly into the console, i.e. 

90 either by applying hisfingerprintto a designated part 
of the console, so that such may be scanned, or by 
inputting a personal identity number, or for example 
by speaking into the console or by writing his sig- 
nature on a sensitive portion of the console, or by any 

95 suitable other alternative means, which may be con- 
sidered to be a suitable unique personal char- 
acteristic to confirm identity of the user before access 
is permitted to the facilities of the console or into a 
secure location. 

1 00 As it will be appreciated, ail of such facilities may 
be*provided on the device itself or be provided on a 
further device connectable to the device of the inven- 
tion. A further alternative which is envisaged is the 
use of a video card or disc in which the i nformation is 

105 permanently stored thereon and which is associated 
with the device of the invention to confirm identity 
and to minimize the amount of storage required in 
the device itself, such video disc or card being incor- 
porated in the device, if necessary, possiblyforming 

110 part of the casing or accommodated therein. 

Referring now to Figures 5 and 6, these illustrate 
flow diag rams of a secure method of identifying a de- 
vice according to the present invention, in which a 
matched pair of modules 50, 60 are provided, each 

115 being constructed from appropriate memory devices 
and being programmed with an identical sequence 
of code numbers, said sequence being generated at 
random. The pair of modules are readily identified 
both in internally and externally to ensure that these 

1 20 are correctly matched when used. One of such mod- 
ules 50 is then incorporated in the device of the pre- 
sent invention and another of such modules 60 is in- 
corporated in a central computer of the institution 
issuing the device. The sequence of numbers in the 

1 25 modules 50 and 60 constitutes a list in which one of 
said numbers in said list is current fora predermined 
period of time, such that at the same time thetwo 
numbers in the two modules are identical. Thus, if 
the module 50 contained in the device of the present 

130 invention is interrogated and the number provided 
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thereby is compared with the number currently in the 
matched module 60 in the central computer, such 
numbers will be identical and the device will be uni- 
quely identified. Since such sequences of numbers 
5 are generated at random for each matched pair of de- 
vices, the likelihood of another similar device pro- 
ducing the same number at the same moment in 
time, although it is statistically possible, would be in- 
fini- 

10 tesimally small. 

Thus, the user of the device, upon actuation 
thereof, could either have the internal code number 
current in the list displayed on his device, or trans- 
mitted directly to the console so that upon input 

1 5 thereof into the console together with other means of 
confirming his identity, for example using a p.i.n. 
number, fingerprint, voice print or other personal 
characteristic, the identity of the user can be con- 
firmed. The moduel 60 in the central computer will 

20 have meantime indicated to the data base of the insti- 
tution the correct identity of the user of the device 
having that code number atthat particular moment 
in time allowing for anytransmission delays, etc., 
and will have looked for confirmation of the identity 

25 of the user by appropriate input either into the device 
of the user or into a console, such as a cash dispenser 
or service till before permitting access to the facilities 
thereof. When correct identification has been con- 
firmed, the number used is deleted from the list in the 

30 code sequence, so that such cannot be used again, 
thereby preventing the possibility of anyone attemp- 
ting to memorise the number and determining the 
cycle time of the device and thereby attempting to 
reuse that number. This feature also provides an in- 

35 built obsolenscence of the device, so that a fresh 
module can be issued periodically providing an 
additional degree of control over the use of such 
modules by the institution. 
The generalised prog ram steps required for per- 

40 formance of the necessary routines internally in the 
device of the present invention and in the central 
computercontaining access to the personal account 
information etc. are shown in the flow diagrams of 
Figures 5 and 6. 

45 In addition to the envisaged uses in a bank environ- 
ment otherfinancial institutions could also utilise 
such a system, since many building societies are 
now operating cash dispensers and service tills, and 
it may be that such a system could constitute the 

50 basis of an electronic identity card, which can be 
used by the secu rity services for unequ ivocally 
identi- 
fy ing an individual. In this sense, it is envisaged that 
such may be of particular value in the area of pass- 

55 port control, with the personal information, includ- 
ing a photographic image of an individual, stored in a 
centra! computer and accessed as required by 
customs officials in order to establish the identity of 
the user of the device, but such arrangements would 

60 require international agreement in orderto permit 
widespread use of such a system. 

Afurther application into which the device of the 
present invention may be used is in electronicfund 
transfer at point of sale {eftpos),so that anytransac- 

65 tion made by the user would inv Ive such a device, 



so that monies could be deducted either from a credit 
account of the user, ordirectly from a current ac- 
count; access to the users personal account being 
available via a suitableterminal in the retailers pre- 

70 mises. Such an embodiment could lead to an arran- 
gement providing an effectively cashless society, 
which would give considerable central control, 
which might not always be welcomed by the general 
public, over cash flow in the economy, in that such 

75 information would not only be available to the insti- 
tutions providing the use of facilities, but could also 
be made available to tax authorities. This would en- 
able a considerably reduction in "cash only trans- 
actions" and provide a considerable hurdle to the 

80 black economy, at least from the point of view of 
supply of materialsand equipment, and such could 
have considerable economic effect. 

Further, with the advent of computers across a 
wide spectrum of society, with a suitable interface, 

85 such a device could also provide the user with access 
to his personal account directly from a home console 
or home computer, providing the user with much 
greater control over his accounts and enabling him 
to perform transactions at home rather than having 

90 to visit a banks premises and having to rely upon the 
issuance of statements, etc, to checkthe status of his 
account. Therefore, such a device could provide the 
user with considerable benefits and a greater degree 
offlexibility and control overhisown personal 

95 affairs. Indeed, the user could use such computer- 
based facilities for purchasing items or booking fa- 
cilities such as theatre tickets etc. from home, having 
the appropriate amounts deducted directly from his 
own personal account similar to the facilities which 
100 already exist via PRESTEL in the U.K. 

As will be appreciated from the above, the device 
of the present invention has considerable advan- 
tages over existing prior art devices and it provides 
for a wide range of alternative services and facilities 
105 to be provided to the user, who will also have greater 
degree of control over his own personal financial 
affairs. 

Whilst the device of the present invention is prefer- 
ably incorporated in a wrist watch, this being an item 

110 which virtually everyone possesses a nd is often the 
first item put on in the morning and the fast item 
taken off at night, and provides the ideal basis for in- 
corporation of the device of the present invention, 
since it already contains many of the components 

115 necessary for performance of the functions thereof, 
the device could equally be incorporated in any other 
personal item, including a personal calculator an 
item of jewellery according to preference. 
Further, such a device, as envisaged by the inven- 

120 tion, may be used with existing credit cards but using 
the device in a watch to display or transmit coded 
information to be used in conjunction with the in- 
formation on the credit card and p.i.n. number to pro- 
vide a further degree of security over existing arran- 

125 gements. 
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CLAIMS 

1 . An electronic identity device including means 
for enabling output of identity information upon ac- 

5 tivationth reof. 

2. A device as claimed in claim 1 wherein said en- 
abling means includes means for receiving and com- 
paring input information with data stored in said de- 
vice and only outputting said identity information 

1 o upon a correct match between said input information 
and said stored data being achieved. 

3. Adevice as claimed in claim 1 or2,inwhich 
said input information is selected from either a per- 
sonal identity number, or an individual characteristic 

15 of a user, such as a fingerprint, voice print, signature, 
or other unique personal characteristic. 

4. Adevice as claimed in any preceding claim 
wherein said output information is displayed on said 
device. 

20 5. A device as claimed in any preceding claim 
wherein said output information is transmitted via 
ultrasonic, infrared, short range radio transmission, 
or via an electrical connectorto a remote console, in 
order to enable access to f acil ities th ereof upon con- 

25 firmation of the identity of the user in a secure 
manner. 

6. A device as claimed in claim 5 in which the 
identity information is time-dependent and is gener- 
ated in a multi-number, time-dependent code gener- 

30 ator synchronised with an identical, remote code 
generator associated with central data storage 
means, with which communication is possible via a 
console to which access may be sought, so thatthe 
module in said device is uniquely identified and, 

35 upon confirmation of the identity of the user by 
means of a personal identity number or personal 
characteristic, access to the console and thus the 
central computer system is enabled. 

7. A device as claimed in claim 6 in which the 
40 time-dependent identity information is either dis- 
played on the device or transmitted directly by said 
device via an infrared, ultrasonic, short range radio 
signal or an electrical signal to a remote console to 
which access is sought in use. 

45 8. The device as claimed in any preceding claim 
wherein said device additionally contains memory 
storage means enabling the storage of personal data 
in a non-secure manner and able to be accessed and 
updated by the user, by a key pad incorporated in the 

50 device or con nectable thereto. 

9. Adevice as claimed in any preceding claim, 
wherein such is incorporated in a watch, preferably a 
wrist watch. 

10. A system for enabling the identification of in- 
55 dividuals, comprising a personal electronic identity 

device including means.enabling output of personal 
identity information for input to a console associated 
with, or directly to, a computer-based system to en- 
able unique identification of the user of the personal 

60 identity device by means of said output information, 
corroborated by the input to said computer of a per- 
sonal identity number or the id ntification of a per- 
sonal characteristic of the user, to allow access to fac- 
ilties provided by said computer based system. 

65 11. A system as claimed in claim 10 in which the 



output of identity information istime-dependent and 
each personal identity device incorporates a multi- 
number code generator matched with an identical, 
remote code generator associated with the computer 
70 for uniquely identifying a particulardevice at a pre- 
cise moment in time. 

12. A system as claimed in claim 10 or 11 in which 
said device may interface the computerised system 
via remote consoles or via a home computer or a tele- 

75 phone link. 

13. A device as claimed in any preceding claim in 
which a radio paging means is incorporated and 
which may additionally permit full duplex operation 
allowing the reception ortransmission of messages 

80 to and from said device. 

14. A device as claimed in any preceding claim in 
which additional devices may be attached thereto in 
orderto access information contained within said de- 
vice or to provide additional storage or data for ac- 

85 cess by said device. 
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